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Abstract — To effectively represent possibility arising from 
states and dynamics of a system, fuzzy discrete event systems 
as a generalization of conventional discrete event systems have 
been introduced recently. Supervisory control theory based on 
event feedback has been well established for such systems. 
Noting that the system state description, from the viewpoint of 
specification, seems more convenient, we investigate the state- 
based control of fuzzy discrete event systems in this paper. We 
first present an approach to finding all fuzzy states that are 
reachable by controlling the system. After introducing the notion 
of controllability for fuzzy states, we then provide a necessary and 
sufficient condition for a set of fuzzy states to be controllable. 
We also find that event-based control and state-based control 
are not equivalent and further discuss the relationship between 
them. Finally, we examine the possibility of driving a fuzzy 
discrete event system under control from a given initial state 
to a prescribed set of fuzzy states and then keeping it there 
indefinitely. 

Index Terms — Controllability, fuzzy discrete event systems, 
fuzzy state feedback control, reachability, stability. 

I. Introduction 

IN the main paradigm of conventional discrete event sys- 
tems (DESs), a system is modeled as a finite automaton 
that executes state transitions in response to a sequence of 
events occurring asynchronously over time [23]. Typical exam- 
ples include computer and communication networks, flexible 
manufacturing systems, traffic control systems, and distributed 
software systems. To provide a mathematical framework for 
the design of controllers for this class of systems to meet 
various specifications, it is usually assumed that events in 
a DES are decomposed into two sets of controllable and 
uncontrollable events, and the DES is controlled by enabling 
and disabling of controllable events. 

Control specifications are usually given in terms of lan- 
guages (i.e., sets of event sequences) or predicates (i.e., sets 
of states). For the two kinds of specifications, Ramadge and 
Wonham proposed two control techniques: supervisory control 
[23] and state feedback control [24]. The former assigns 
enabled events to the controlled system, the plant, according to 
event sequences so that the closed-loop system of supervisor 
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and plan achieves a pre-specified language, while the latter 
assigns enabled events according to states so that the closed- 
loop system reaches only the states satisfying a pre-specified 
predicate. The relationship between the controllability of pred- 
icate introduced in [13] and that of the corresponding legal 
language was studied in [29]. There has been a large amount 
of significant research based on the two control techniques 
within the past few years (see, for example, [5], [25], [31] 
and the bibliographies therein). 

Most of the prior work on control of DESs has focused 
on systems that are modeled as deterministic finite automata. 
Nevertheless, there are many instances where it is necessary 
and natural to model a DES with uncertainty. A few attempts 
have already been made for nondeterministic systems [8], [9] 
and probabilistic systems [7], [11], [12], [14] that arise in 
partially observable systems and some complex systems. 

However, in some other real situations that can be essen- 
tially modeled by DESs such as diagnosis and treatment in 
biomedical field, subjectivity and possibility, which are differ- 
ent from nondeterminism and randomness, are also inevitable 
issues when dealing with states and state transitions of such 
systems. A typical example given in [15], [16] is a person's 
health status, where the statement of a person's condition is 
often somewhat vague such as "John is excellent," and more- 
over, the change of the condition from a state, say "excellent", 
to another state, say "good", is obviously imprecise, since 
it is hard to measure exactly the change. Similar problems 
come up when we use DESs to model chemical reactions, 
mobile robots in an unstructured environment [19], intelligent 
vehicle control [26], and waste water treatment [30]. States 
and state transitions of these systems are inherently somewhat 
imprecise, uncertain, and vague. 

To capture this kind of uncertainty appearing in states and 
state transitions of a system, Lin and Ying incorporated fuzzy 
set theory together with DESs and thus extended crisp DESs 
to fuzzy DESs by proposing fuzzy finite automaton model 
in [15], [16]. Fuzzy set theory was introduced by Zadeh in 
1965 [34] and further developed as a basis for representing 
possibility in [35]; nowadays, the theory has been applied to a 
wide range of scientific areas and has proven to be a good tool 
for representing uncertainty. Like fuzzy logic systems based 
on fuzzy IF-THEN rules, fuzzy DESs facilitate the modeling 
of some complex systems. 

In fuzzy DESs, the states are fuzzy and every state transition 
is associated with a possibility degree. Under the framework 
of fuzzy DESs, Lin and Ying studied state-based observability 
and some optimal control problems in [15], [16]. It is worth 
noting that the control mechanisms in [15], [16] are crisp 
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in that if an event is controllable, then its occurrence will 
be permitted (or prevented) with certainty; with crisp control 
mechanisms, some control problems for fuzzy DESs have 
been well translated into the problems in conventional DESs. 
Recently, the application of fuzzy DESs to treatment planning 
for HIV/AIDS patients has also been reported by Lin and Ying 
et al. (see [17], [18], [32], [33]). 

As a continuation of the works [15] and [16], the first two 
authors developed supervisory control theory for fuzzy DESs 
modeled by max-min automata in [3]. The behavior of a fuzzy 
DES is described by its generated fuzzy languages. Informally, 
a fuzzy language consists of certain event strings associated 
with membership grade; the membership grade of a string can 
be interpreted as the possibility degree to which the system in 
its initial state and with the occurrence of events in the string 
may enter another state. 

Control in [3] is exercised by a fuzzy event feedback su- 
pervisor that disables controllable events with certain degrees 
so that the closed-loop system exhibits a pre-specified fuzzy 
language. Taking controllable degrees of events into account, 
the control mechanism in [3] permits a controllable event 
to occur incompletely, which is a generation of the crisp 
control mechanisms used in [15], [16]. A somewhat general 
supervisory control framework of fuzzy DESs, which is based 
on different underlying constituents of fuzzy automata and 
uncontrollable event set, has also been established indepen- 
dently by Qiu in [22]. More recently, the centralized and 
decentralized supervisory control problem for fuzzy DESs 
with partial observation has been addressed in [4]. 

Although the supervisory control based on event feedback 
is dynamic in the sense that the control action may change on 
subsequent visits to a fuzzy state, providing a fuzzy language 
specification seems a difficult thing since the allowable possi- 
bilities of all prefixes of every event string need to be exactly 
specified. For instance, if one wants to use a language-based 
approach to encode the state avoidance control problem (i.e., 
the supervisor has to control the plant so that the controlled 
plant does not reach a set of forbidden states), then the 
obtained specification may be of the size of the global system 
itself. In addition, event-based control is highly dependent on 
the history of the system. For these reasons, state specification 
and state-based control for some fuzzy DESs seem to be more 
convenient and intuitive. For example, in a medical treatment a 
patient can easily specify her admissible states and a physician 
usually makes a treatment decision according to the patient's 
current state. In fact, the crisp control mechanisms used in 
[15], [16] are based on states. It should be noted, however, that 
crisp control mechanisms are not always adequate for some 
applications; for instance, in a manufacturing system, using 
a fuzzy control mechanism to regulate the processing rate of 
a machine may be more effective than using a crisp control 
mechanism. If a control mechanism is not crisp, then things 
get significantly more complicated, as we will see later. Thus 
further studies are still necessary. 

The aim of this paper is, therefore, to develop fuzzy state 
feedback control of fuzzy DESs. More specifically, the situa- 
tion under consideration in the present paper is that of a given 
fuzzy DES, modeled by a max-min automaton, and whose 



reachable states need to be modified by a fuzzy state feedback 
controller in order to achieve a given set of specifications. 
The controller assigns to the occurrence of each fuzzy event 
a possibility at every fuzzy state. As a result, the reachable 
state set of the closed-loop system is generally not a subset 
of that of the open-loop system (i.e., the plant). This is the 
key difference in state-based control between fuzzy DESs and 
crisp DESs, and is also a main obstacle to discussing state- 
based control for a fuzzy DES. 

After defining the fuzzy state feedback controller, we first 
investigate what states can be reached from the initial state of a 
fuzzy DES by associating a certain controller with the system. 
If we know the reachable state set, we can readily evaluate 
possibilities of control. Consider, for example, the medical 
treatment modeled by a fuzzy DES (see Example 5 in [22]). 
Once the physician knows all reachable states, he can tell his 
patient whether the patient's desired state can be achieved after 
a treatment; this is done by checking whether or not the desired 
state belongs to the set of reachable states. The reachability 
arises from our fuzzy control mechanisms and becomes a basic 
issue in fuzzy DESs. Note that this issue is trivial for crisp 
DESs since in crisp DESs every reachable state of any closed- 
loop system is a reachable one in the corresponding open-loop 
system. 

We then introduce the controllability of fuzzy states and 
present a necessary and sufficient condition for a set of 
fuzzy states to be controllable. As we will see, state-based 
control and event-based control are not equivalent, and the 
relationship between them is explored. Finally, we turn our 
attention to examining the stabilization of fuzzy DESs, that 
is, the possibility of driving a fuzzy DES (under control) from 
its initial state to a prescribed subset of fuzzy state set and then 
keeping it there indefinitely. The stabilization characterizes 
exactly the maintainability of a desired state in some systems. 

The remainder of this paper is structured as follows. We 
briefly review some basics of fuzzy DESs in Section II and 
define the fuzzy state feedback controller in Section III. 
The reachability is explored in Section IV. In Section V, 
we introduce the concept of controllability of fuzzy states 
and provide a necessary and sufficient condition for a set 
of fuzzy states to be controllable. Section VI is devoted to 
the relationship between state-based control and event-based 
control. We discuss the stabilization of fuzzy DESs in Section 
VII and conclude the paper in Section VIII. Details of all 
proofs are in the Appendix. 

II. Background in Fuzzy Discrete Event Systems 

In Sections II-A and II-B, we will briefly recall the models 
of fuzzy DESs and a few basic facts on event feedback control 
of fuzzy DESs, respectively. 

A. Models of Fuzzy DESs 

In this subsection, we recall the formulation of fuzzy DESs 
modeled by max-product automata and max-min automata, 
respectively. To this end, let us review some notions and 
notations on fuzzy set theory. 
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Let X be a universal set. A fuzzy subset of X (or simply 
fuzzy set), A, is defined by a function assigning to each 
element x of X a value A(x) in the closed unit interval 
[0, 1]. Such a function is called a membership function, which 
is a generalization of the characteristic function associated 
to a crisp set; the value A(x) characterizes the degree of 
membership of x in A. 

The support of a fuzzy set A is a crisp set defined as 
supp(^4) = {x e X : A(x) > 0}. Whenever supp(„4) is a 
finite set, say supp(.A) = {xi, x 2 , . . . , x n }, then fuzzy set A 
can be written in Zadeh's notation as follows: 

A _ Am) , Ax2) A{x n ) 
xi x 2 x n 

We denote by F{X) the set of all fuzzy subsets of X. For 
any A, B G F{X), we say that A is contained in B (or B 
contains A), denoted by A C B, if A(x) < B(x) for all 
x G X. We say that A = B if and only if A C B and B C A. 
A fuzzy set is said to be empty if its membership function is 
identically zero on X. We use O to denote the empty fuzzy 
set. 

For any family Aj, i G I, of elements of [0,1], we write 
Vjg/Aj or V{Ai : i e 1} for the supremum of {A^ : i G /}, and 
Ai e /Ai or A{Ai :ie/} for the infimum. In particular, if J 
is finite, then VieiK and Aig/A^ are the greatest element and 
the least element of {A^ : i G /}, respectively. Let A G [0, 1] 
and ^4 G ^ r (^). The sca/e product A • .4 of A and A is defined 
by 

(A • A){x) = AA A(x), 

for each x G X; this is again a fuzzy set. 

For later need, let us recall two operations on matrices in 
fuzzy set theory. Given two matrices A = [a,ij] mxn and B = 
[bij)nxk, the max-product operation gives a composition 
A B — [cij] mX k of A and B, where cy = VjL. 1 aubij; 
the max-min operation o gives another composition A o B = 
[dijjmxk of A and B, where = Vf =1 (a^ A by). 

We can now recall the models of fuzzy DESs in the literature 
[15], [16], [22], [3]. Two kinds of fuzzy automata which 
are known as max-product and max-min automata in some 
mathematical literature (see, for example, [10], [20], [28]) are 
used to model fuzzy discrete event systems. 

In the framework of Ramadge and Wonham, a crisp DES 
is represented by a deterministic finite automaton 

G={Q,E,S,q ), 

where Q is a crisp state set with the initial state q n , E is an 
event set, and 8 : Q x E ^ Q is a transition function (in 
general a partial function) that describes the evolution of the 
system. 

States in the setting of a fuzzy DES are fuzzy subsets of 
the crisp state set Q, which are called fuzzy states. Throughout 
this paper, let n be the cardinality of the crisp state set Q in 
which we are working. If we enumerate the elements of Q 
as go, <Zi, • ■ • ! <Zn-i> then each fuzzy state q can be written as 
a vector [xo,x\, . . . ,x n -\] with Xi G [0,1] representing the 
grade of the current state being In [15] and [16], a fuzzy 
DES is represented by a max-product automaton 

G=(Q,E,~5,q ), 



where Q, E, 5, q~o are fuzzy extensions of the crisp Q, E, 8, qo, 
respectively. More precisely, Q consists of fuzzy states q; E 
is a set of fuzzy events a, where a is represented by an n x n 
matrix over [0,1]', 8 '. Q x E — > Q is the transition function 
defined by S(q,a) — qQ a; q~o is the initial state. 

Based on this model, Qiu [22] considered the case that the 
transition function is defined by the max-min operation o as 
well. Note that in the above model, the fuzziness of a system 
is encoded by fuzzy states and fuzzy events, and in fact the 
set Q of fuzzy states and the transition function 8 are crisp. 
Abstractly, the first two authors adopted in [3] the following 
max-min automaton to model a fuzzy DES: 

G=(Q,E,5,q ), 

where Q is a crisp (finite or infinite) set of states, E is a finite 
set of events, q G Q is the initial state, and 8 is a fuzzy 
transition function from Q x E x Q to [0, 1], which encodes 
the fuzziness of the system. The max-min operation is used 
when the domain of fuzzy transition function is extended to 
Q x E* x Q, where E* denote the set of all finite strings 
constructed by concatenation of elements of E, including the 
empty string e. 

In fact, in terms of the same operation or o, it is not 
difficult to verify that the fuzzy automata used in [15], [16], 
[22] and [3] can be converted each other. Moreover, this 
conversion can be equivalent in the sense that the behavior 
(fuzzy language) is unaltered. Fuzzy states in the model used 
in [15], [16], [22] are more intuitive, so for our purpose of 
state-based control, we would like to adopt this model in the 
present work. In addition, for simplicity we restrict ourselves 
to the max-min operation o of fuzzy automata. More explicitly, 
the fuzzy DES studied in this paper is modeled by a max-min 
automaton G = (Q,E,8,qo), where Q is the set of fuzzy 
states q, E is the set of fuzzy events a, 8 : Q x E — > Q is the 
transition function defined by S(q, a) — q o a, and q is the 
initial state. 

To describe what happens when we start in any fuzzy state 
and follow any sequence of fuzzy events, 8 is always extended 
from the domain Q x E to the domain Q x E* in the following 
recursive manner: 

5(q,e) := q 
S(q, sa) := 8(8(q, s),a) for any s G E* and a G E. 

B. Event Feedback Control of Fuzzy DESs 

The event feedback control of fuzzy DESs was studied 
in [22] and [3], independently. Notice that there is a little 
difference between the two control mechanisms: in [3], we 
differentiate between controllable events and uncontrollable 
events, where each controllable event can be controlled with 
any degree while each uncontrollable event cannot be disabled; 
in [22], each event is associated with a degree of uncontrolla- 
bility, which generalizes all control mechanisms in [15], [16], 
and [3]. Nevertheless, conditions for a fuzzy language to be 
controllable are essentially the same. 

To state the controllability theorem for fuzzy DESs, we need 
recall several notions. The fuzzy language generated by G, 
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denoted £g, is a fuzzy subset of E* and is denned by 

£g( s ) = V" = i(5(<Zo,§) °e„ 

where e, is an n x 1 column vector of n — 1 O's and a 1 in 
the ith position. For convenience, we set £q(c) = 1. It is by 
definition that £q(s) > £q(sci) for any s G _E* and a E E. 
For these reasons, by a fuzzy language we mean the empty 
language O or a fuzzy language satisfying the two previous 
properties in the rest of the paper. We use T£ to denote the 
set of all fuzzy languages over E. More specifically, 

T£ = {£ G T{E*) : £ = O or £ satisfies that £{e) = 1 
and £(s) > £(sa) for any s G E* and a G E}. 

The concatenation £\£ 2 of two fuzzy languages £\ and 
£ 2 is defined by 

(A£ 2 )(s) = V{A(si)A£ 2 (s 2 ) : 5i,S 2 € -B* and = s}, 
for all SeE*. 

Suppose, for control purposes, that each fuzzy event a E E 
is associated with a degree of uncontrollability E uc (a), where 
E uc (a) G [0,1]. Control is achieved by means of a fuzzy 
(event feedback) supervisor. Formally, a fuzzy supervisor for G 
is a map 5* : supp(£g) — > J-(E) satisfying S(s) (a) > E uc (a) 
for any s G supp(£g) and a E E. The closed-loop system 
is denoted by S/G; the behavior of S/G is described by the 
fuzzy language £§/q obtained inductively as follows: 

1) C §/e (e) = 1; 

2) £g /l5 (sa) = £g(sa)AS(s)(a)A£g,Q(s) for any s e E* 
and a € E. 

To give the definition of controllability, it is convenient to 
introduce a fuzzy subset £ uc of 

c r ~s J E uc (s), if S G E 
^ uc[S) ~ \ 0, if S G 

where E uc (s) is the uncontrollable degree of s. 

The following definition generalizes Definition 2 in [3] by 
taking the uncontrollable degrees of events into account. It 
is easy to show that this definition is equivalent to fuzzy 
controllability condition in [22]. 

Definition 1: A fuzzy language IC C £^ is said to be 
controllable with respect to £q and E uc if 

ic£ uc n c /c. 

By slightly modifying the proof of Proposition 1 in [3], it is 
ready to show that the controllability of K, is equivalent to that 
K-(s) AE uc (a) A£q(s<2) = )C(sa) for any s G E* and ae E. 
The following controllability theorem established in [3], [22] 
shows us when a desired fuzzy language can be synthesized 
through a fuzzy supervisor. 

Theorem 1: Let JC C £q, where AC is a nonempty fuzzy 
language. Then there exists a fuzzy supervisor S for G such 
that £§/Q = IC if and only if IC is controllable. 



III. Fuzzy State Feedback Controller 

For subsequent need, we formalize the notion of fuzzy state 
feedback controller in this section. 

From now on, let us keep the assumption that the fuzzy 
DES under consideration is modeled by a max-min automaton 
G = (Q,E,5,qo) and each fuzzy event a is associated with 
an uncontrollable degree E uc (a) G [0, 1]. 

Definition 2: A fuzzy state feedback controller (FSFC) for 
G is a map 

/ : Q - T{E), 

which satisfies that f(q)(a) > E uc (a) for any q G Q and 
a € E. 

It follows from the definition that an FSFC / attaches to 
each fuzzy state q of G a fuzzy subset of fuzzy events. We 
interpret f(q) (a) as the possibility of fuzzy event a being 
enabled at q. Thereby f(q)(a) = means that a is disabled at 
q. If it happens that 6(q, a) = [0, 0, ... , 0], then we consider 
a as a physically unfeasible event at q. For convenience, we 
exclude the state [0, 0, . . . , 0] from Q in what follows. If a 
fuzzy event is disabled or physically unfeasible at a state of 
controlled system, it is rational to think that the fuzzy event 
does not change the state of controlled system. 

We should point out that there is a crucial distinction be- 
tween the control mechanism here and the crisp state feedback 
control in the literature. In [15], [16], the crisp state feedback 
controls require that the occurrence and nonoccurrence of 
each event are certain; mathematically, the function of state 
feedback specifies a set of events to each state, and the 
closed-loop system can be viewed as a subsystem of the 
corresponding open-loop system. 

Denote by <r the transition function of closed-loop system 
induced by /. Formally, (V : Q x E — > Q is defined by 

S f {q,a) = f{q){a) ■ S(q,a), 

where the notation "•" stands for the scale product of 
the number f(q)(a) and the fuzzy subset 5(q,a), that is, 
if 5(q,a) = [xi, x 2 , ■ . ■ , x n ], then f(q)(a) ■ 5(q,a) = 
[f(q){a)Ax 1 J(q)(a)Ax 2 , f(q)(a)Ax n }. We write & = 
(Q,E, 5*,q~o) for the closed-loop fuzzy DES formed from G 
and /. 

By definition, the fuzzy language generated by the closed- 
loop fuzzy DES & , denoted £<§/, is as follows: 

^ /-n f 1, if s = e 

_ \ Vf =1 S f (q ,s) o a, otherwise, 

where is the unit vector defined as in Section II-B. It 
is obvious that £g f is a fuzzy sublanguage of £g, namely 
£q! Q £q- The following observation shows us a quantitative 
relation between £q s and £q, which will be useful later. 

Lemma 1: Suppose that / is an FSFC for G and aj G E, 
where j = 1, 2, . . . , k. Let q~j = S^(qo, 0102 • • • aj) and aj = 
f{qj-i){aj) for j = 1,2,..., k. Then 

1) S f (q ,aia 2 ■ ■ -a k ) = {A k j=1 aj) ■ S(qa,aia 2 ■ ■ ■ a k ); 

2) £ 6f (aia 2 ■■■a k ) = {A k j=1 a.j) A £ (5 (a 1 a 2 ■ ■ ■ a k ). 
Proof: See Appendix I. ■ 
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IV. Reachability of Fuzzy States 

In this section, we are concerned with what states can 
be reached from the initial state of the fuzzy DES G by 
associating with the system a certain state-based controller. 

We say that a fuzzy state q is reachable in G from the initial 
state qo if there exists some s £ E* such that 6(q~o,s) = q. 
Denote by R(G) the set of all reachable states of the open- 
loop system G. It is clear that R(G) is always a finite subset 
of Q since E is finite. Similarly, denote by R(G*) the set of 
all reachable states of G' from the initial state qo . We define 
M{G) = {q £ Q : 3 FSFC / such that q £ R(&)}; this 
consists of all fuzzy states that may be reached by associating 
with G a certain FSFC. 

Note that if the state feedback control is crisp, then the 
reachable states of any closed-loop system constitute a subset 
of R(G). However, more generally, an FSFC / which assigns 
a possibility other than and 1 to the occurrence of each fuzzy 
event may lead to that R(G^) is not a subset of R(G). In fact, 
the set 3%{G) is much larger than R(G) in general. This is a 
main obstacle to discussing reachability issues and state-based 
control for a fuzzy DES. 

For a given fuzzy DES G or a closed-loop system & , one 
can easily list all fuzzy states that can be reached from the 
initial state since the total number of fuzzy states appearing in 
the system is finite. The computation tree used in [22] is a good 
approach to deciding the reachable state set for a given system. 
A natural problem at this point is that for a given fuzzy state 
q, whether there exists an FSFC /§ such that q £ R(G* 9 ). We 
approach this problem by considering all the possible elements 
of M(G). 

Observe that the max-min automaton G modeling a fuzzy 
DES may be inaccessible. In other words, there may be a 
fuzzy state q £ Q with 5{%,s) ^ q for any s £ E* . Since 
inaccessible states cannot contribute to the computation of 
3£(G), we turn our attention to the accessible part of G. 

Formally, the accessible part of G, denoted Ac(G), is a 
deterministic finite automaton that is defined as follows: 

Ac(G) := (R(G),E,5 ac ,q ), 

where R(G) is defined as before, E and go are the same 



as those of G, and 5 ap = S 



R(G)xE- 



The notation S\ 



R(G)xE 



means that we are restricting S to the smaller domain of the ac- 
cessible states. The effects of accessible part and computation 
tree used in [22] are the same, but the structure of accessible 
part is more compact. 

To characterize the set of reachable states, we need one more 
notation. The function S ac is extended to S ac '■ R(G) x E* — > 
R(G) in the obvious way. For each fuzzy state q £ R(G), 
define Sq(c[) = {s £ E* : <5 ac (<7o, s) = q}. Using the explicit 
structure of Ac(G), there is no difficulty in deriving Sq(<j). 
For any fuzzy state q £ Q, define x(g) := A{E uc (a) : a £ 
E, 3s £ 5,5(5) and w,u £ E* such that s = wau], where 
we set A0 = 1 for notational convenience. 

Using Lemma [T] we can get the following result. 

Proposition 1: Let 38 {q) :— {a ■ q : xiS) < a < 1}. Then 

3?(G)= u m\ 



a,b,c,d b,c,d a,b,c,d 

C ) a,b,c C )_MiC O 
Pi . P2 P3 




Fig. 1. The qualitative relation that nitrification, aeration, and temperature 
affect C* N ]_[+. 

Proof: See Appendix I. ■ 
We give an example to illustrate the application of state- 
based control and the process of computing 3$(G). 

Example 1: Consider the waste water treatment process of 
a small chemical fertilizer plant. The waste water which is 
stored in a tank is of a high ammonia concentration (Cnj_[+) 
and the sole objective of treatment is to decrease Cj^^ under 
economic constraints. There are two means for decreasing 
^NH +: one ' s tne n itrifi ca ti on in an anaerobic condition and 
the other is intermittent aeration. Some natural factors may 
also affect Cmjj+; among other things, the temperature of 
environment is an important one. In general, the increase of 
temperature results in the decrease of Cp^j_j+ , and conversely, 
the decrease of temperature results in the increase of C^p^ . 
Fig-fflshows the qualitative relation that nitrification, aeration, 
and temperature affect C^p^ , where states pi,p2,pz represent 
that C^p^ is "high", "medium", and "low", respectively, and 
events a, b, c, d denote nitrification, aeration, temperature 
increase, and temperature decrease, respectively. 

Notice that the process (system) can go into all the three 
states when applying nitrification in state p\. Nevertheless, 
the possibilities of going into these states may be different in 
practice, and thus, the qualitative relation is somewhat rough. 
For the purpose of controlling Cnj_j+, we use a max-min 

automaton G — (Q, E, 6, qo) to model the quantitative relation 
of ammonia concentrations and their changes under certain 
treatments. Here, the corresponding crisp Q is {j»i,P2,P3} and 
E = {a, b, c, d} with 
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It is assumed that the initial state of C^p^ is go = [0-9, 0.1, 0] 
and all data are provided by experts in an ad hoc (heuristic) 
manner from experience or intuition. Fig. [2] is the accessible 
part of G. We see from the figure that the open-loop system 
G can only reach the following nine states: 



go = [0.9,0.1,0], gi 
g 3 := [0.1, 0.9, 0.1], g 4 
[0.5, 0.5, 0.5], g 7 



= [0.9,0.1,0.1], g 2 := [0.5,0.5,0.1], 
= [0.1,0.1,0.9], g 5 := [0.5,0.1,0.5], 
= [0.1,0.5,0.5], g 8 := [0.1,0.1,0.5]. 



Observe that the nitrification event can be completely con- 
trolled by regulating the dosage of acid and the aeration event 
can only be partially controlled for the confinement of device, 
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[0.9,0.1,0.1] [0.1,0.1,0.9] [0.1,0.1,0.5] 

LJ O 

b,c,d a,b,c 
Fig. 2. The accessible part Ac(G) of G. 

while the temperature is hard to be controlled. Based on 
this, the uncontrollable degrees of fuzzy events are defined 
as follows: 

E uc (h) = 0, E ac (b)= 0.1, E ac (c) = E uc {d) = 1. 

By the definition of \(q) given before Proposition Q] we thus 
get that 

*(*>) = 1, X(9i) = 0.1, X fe)=0fori = 2,3,...,8. 
Further, we have that 

= {?o}, 

^(t^) = {[0.9 A ai, 0.1 A ai, 0.1 A «i] : 0. 

= {[ai, 0.1, 0.1] : 0.1 < ai < 0.9}, 
<^(g 2 ) = {[0.5 A a 2 , 0.5 A a 2 , 0.1 A a 2 ] : 

= {[a ,a ,a Q } : < a < 0.1} U 
0.1 < a 2 < 0.5}, 

@(h) = {[0.1 Aa 3 ,0.9Aa 3 ,0.1 Aa 3 ] : 

= {[ao,ao,ao] : < «o < 0.1} U 
0.1 < a 3 < 0.9}, 

^(g 4 ) = {[0.1 Aa-4,0.1 Aa 4 ,0.9Aa 4 ] : 

= {[ao, ao, Qio] : < ao < 0.1} U 
0.1 < a 4 < 0.9}, 

^(95) = {[0.5 A 0:5, 0.1 Aa 5 ,0.5 Aa 5 ] : 

= {[ao,ao,ao] : < ao < 0.1} U 
0.1 <a 5 < 0.5}, 

&(q 6 ) = {[0.5 Aa 6 ,0.5 Aa 6 ,0.5 A a 6 ] : 

= {[a 6 , a 6 , a 6 ] : < a 6 < 0.5}, 

M{q 7 ) = {[0.1 A 07, 0.5 A a 7 , 0.5 A a 7 ] : 

= {[ao,ao,a ] : < a < 0.1} U 
0.1 < a 7 < 0.5}, and 

&(q s ) = {[0.1 Aa 8 ,0.1 Aa 8 ,0.5Aa 8 ] : 

= {[ao,a ,a ] : < a < 0.1} U 
0.1 < a 8 < 0.5}. 



1 < ol\ < 1} 

< a 2 < 1} 
{[a 2 ,a 2 ,0.1] 

<a 3 < 1} 

{[0.1,03,0.1] 

< a 4 < 1} 
{[0.1, 0.1, a 4 ] 

<a 5 < 1} 
{[a 5 ,0.1,a 5 ] 

] : < a 6 < 1} 

< a 7 < 1} 
{[0.1,0:7,07] 

< as < 1} 
{[0.1, 0.1, a 8 ] 



Consequently, 

32(G) = {g }U{[a ,ao,a ] : < a < 0.5} 
U{[ai,0.1,0.1] : 0.1 < a x < 0.9} 
U{[0.1,a 2 ,0.1] : 0.1 < a 2 < 0.9} 
U{[0.1,0.1,a 3 ] : 0.1 < a 3 < 0.9} 
U{[a 4 ,a 4 ,0.1] : 0.1 < a 4 < 0.5} 
U{[0.1,a 5 ,a 5 ] : 0.1 < a 5 < 0.5} 
U{[a 6 ,0.1,a 6 ] : 0.1 < a 6 < 0.5}. 

As long as we know 3$(G), we can decide whether or not 
there exists an FSFC such that a fuzzy state is reachable in the 
closed-loop system. For example, the fuzzy state [0, 0.1, 0.9] ^ 
31(G), so one should not expect that there is an FSFC such 
that the state can be reached. Since [0.1,0.1,0.1] € M(G), 
there should be an FSFC / such that [0.1,0.1,0.1] G 
Indeed, the following / constructed in the proof of Proposition 
[T]can achieve this aim: for any x G Q and e£E, 



f(x)(e) = 



0. 1, if x = qo and e = b 

1, otherwise. 



It is important to emphasize that all reachable states are 
computed off-line and they can be stored in a table. Once we 
want to know whether a fuzzy state is reachable, we only need 
look up the table. 

V. Controllability of Fuzzy States 

The reachability studied in the previous section only an- 
swers the problem of whether a single fuzzy state can be 
reached by controlling the system. In this section, we are now 
concerned with what sets of fuzzy states can be reached by 
associating with the system an FSFC. Formally, let P be a 
subset of Q; the crisp set P specifies all admissible fuzzy 
states. The aim is to characterize when there is an FSFC / for 
G such that R(&) = P. 

Let us begin with several definitions. For each q G P, we 
define the successor set of q in P, denoted by Succ(q), as 
follows: 

Succ(g) := {(a,p) : a G E,p G P, and 3a > E uc (a) 

such that a ■ q o a = p}. 
Each element of Succ(q) is called a successor of q in P. For 
each q G P, it follows from definition that the successor set 
Succ(q) of q in P is unique. If P is finite, then Succ(q) is also 
a finite set with at most |-E||-P| elements, where |5| denotes 
the cardinality of a set S. 

The following definition identifies a particular subset of 
Succ(q). 

Definition 3: A subset C(q) of Succ(q) is said to be com- 
patible if the following conditions are satisfied: 

(CI) For any (a\,p\), (5 2 ,p 2 ) G C(q), if a x = a 2 , then 
Pi = P2 Z 

(C2) If a G E with E uc (a) > and goa^O, then there 
exists some p 6 P such that (a,p) G C(q). 
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A successor set may have no or more than one compatible 
subsets. Denote by ff(q) the set of all compatible subsets of 
Succ(g). 

The next definition is fundamental. 

Definition 4: A subset P of Q is said to be controllable 
(with respect to G and E uc ) if there is a selection of 
C(q) £ ^(q), where q runs over P, satisfying that for 
each p £ P, there exist an integer k > and a sequence 

(q ,ai,qi,a 2 ,...,a,k,qk = P) with (5i,&) £ C(<7i-i) for 
i=l,2,...,k. 

Thus controllability asserts that there is a selection of 
compatible successor sets under which every element of P 
is reachable from qo- Note that the empty set is trivially 
controllable. The definition also implies that qo £ P whenever 
P 7^ 0. In fact, if qo ^ P, then by the assumption P ^ there 
is another element, say p £ P. Furthermore, there exist an 
integer k > and a sequence (q~ , a\, q%, a 2 , ■ ■ ■ , 5*, % = p) 
with (a,,%) S C(gi_i) for i = 1,2,..., A:. In particular, 
C(q~o) is defined, which means that qo £ P, a contradiction. 

The selection of compatible subsets in Definition |4] is a 
technical issue. Note that in practice the admissible state set 
P of the system is usually specified by a finite set. For this 
case, we can approach it by giving a graphical representation 
of successor sets as follows. 

Suppose that P = {qo, q\, . . . , q m } Q Q- A successor graph 
of P, denoted SG(P), is a labeled, directed graph {P,B), 
where the vertex set consists of all fuzzy states in P, and there 
is an edge from q^ to q~j labeled a exactly if (a, qj) £ Succ(qj). 
Deciding the controllability of P reduces to finding a subgraph 
(P', B') of SG(P) that satisfies the following conditions: 

. P' = P; 

• there are no two edges with the identical label coming 
out of the same vertex; 

• for any q £ P', if there is a a £ E with E uc (a) > 
coming out of q in SG(P), then there must be an edge 
(q,a,q~i) £ B' for some £ P'; 

• each vertex is reachable from q - 

In fact, the above conditions are only a restatement of 
controllability in graphical language, but the explicit graph 
structure makes it easier to select desired compatible subsets. 
If there exists a subgraph of SG(P) satisfying the above 
conditions, then P is controllable. Due to this, we refer to such 
a subgraph as controllable subgraph of SG(P). Controllable 
subgraphs can be found by using some standard searching 
algorithms (see [27] for example); we do not go into details 
here. 

After having a controllable subgraph, the compatible subsets 
required in Definition[4]can be directly derived from it. In fact, 
if (P, B') is a controllable subgraph, we can take C{q) = 
{(a,q r ) : (q,a,q') £ B'} for each q £ P. It follows from 
the definition of controllable subgraph that this selection of 
compatible subsets does make P controllable. 

We now proceed to establish the controllability theorem for 
the state feedback control. 

Theorem 2: Let P be a nonempty subset of Q. Then there 
exists an FSFC / for G such that R(G f ) = P if and only if 
P is controllable. 

Proof: See Appendix I. ■ 



d c, d 

C7> c O 

92 96 




Fig. 3. The successor graph SG(P) of P. 

Thus a nonempty subset of Q is controllable precisely when 
it can be 'synthesized' through an FSFC. We illustrate with 
the following. 

Example 2: Consider the fuzzy DES G — (Q,E,S,q~o) 
described in Example Q] and keep the uncontrollable degrees 
of fuzzy events given there. It is well-known that nitrification 
is always efficient but with more cost than aeration, while 
aeration is not applicable to the case of high ammonia concen- 
tration. So nitrification will be adopted if Cj^j_j+ is very high, 
and aeration will be preferred otherwise. Thus, some states 
such as <7s = [0.5,0.1,0.5] are not desirable because neither 
nitrification nor aeration is dominant in these states. Suppose 
that the admissible state set P is {qo, q~\, q*2, <?3, q~4, 96, <Z7: 99}, 
where the unique new state q~g = [0.1,0.1,0.1]. 

By definition, we can easily get successor sets: 

Succ(<7o) = {(a,q 3 ), (a,q 9 ), (Mi), (b,q 9 ), (c,Qi), (d,q )}, 

Succ(gi) = {{a,q 3 ), (a,q 9 ), (Mi), (b,q 9 ), (c,gi), (d,qi)}, 

Succ(g 2 ) = {(a,q 7 ),(a,q 9 ),(b,q 9 ),(c,q 6 ),{d,q 2 )}, 

Succ(g 3 ) = {(a,<jf 4 ), (d,q 9 ), (b,q 4 ), (b,q 9 ), (c,q 7 ), (d,q 2 )}, 

Succ(g 4 ) = {(a, 94), (d,q 9 ), (b,q 4 ), (b,q 9 ), (c,q 4 ), (d,q 7 )}, 

Succ((? 6 ) = {(d,q 7 ),(d,q 9 ),(b,q 9 ),(c,q 6 ),(d,q 6 )}, 

Succ(<? 7 ) = {{d,q 9 ),(b,q 9 ),(c,q 7 ),(d,q 6 )}, 

Succ(<? 9 ) = {(d,q 9 ),(b,q 9 ),(c,q 9 ),(d,q 9 )}. 

The successor graph SG(P) of P is shown in Fig. [3] 
Clearly, the graph shown in Fig. |4]is a controllable subgraph 
of SG(P), and thus P is controllable. Correspondingly, the 
following selection of compatible subsets satisfies the require- 
ments of Definition [4] 

C(<7o) = {(a,q 3 ), (b,q 9 ), (c,Ol), (d,q )}, 

C(qi) = {(a,q 3 ),(b,q 9 ),(c ) qi),(d ) q-i_)}, 

C(q 2 ) = {(d,q 7 ),(b,q 9 ),(c,q 6 ),(d,q 2 )}, 

C (Qs) = {(b,q4),(c,q 7 ),(d,q 2 )}, 

c (qi) = {(b,q4),(c,q4),(d,q 7 )}, 

C(qe) = {(d,q 7 ),(b,q 9 ),(c,q 6 ),(d,q 6 )}, 

C (Q7) = {(b,q 9 ),(c,q 7 ),(d,q6)}, 

C (Q9) = {(b,q 9 ),(c,q 9 ),(d,q 9 )}. 
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Fig. 4. A controllable subgraph of SG(P). 

The following function / : Q — > J-(E) that follows from 
the definition of f(q)(a) given in the proof of Theorem [2] is 
an FSFC for G: 
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— for any q G Q\P. 



It is easy to check that R(& ) = P. 

In crisp DESs, the disjunction of two controllable predicates 
is again controllable. However, analogous property does not 
hold in fuzzy DESs. 

Remark 1: If P%, P2 C Q are controllable, then neither PiU 
P2 nor Pi (~i P2 need be controllable. The following counter- 
example serves: 

Let G' = (Q, E', S, qo), where E' = {a} and Q, 5, qo, a are 
the same as those in Example Q] Suppose now that E uc (a) = 
0.8, and pick 

Pi = [0.1,0.9,0.1], [0.1,0.1,0.9]}, 

P 2 = {q , [0.1,0.8,0.1], [0.1,0.1,0.8]}. 

There is no difficulty in checking that both Pi and P2 are 
controllable, but neither of Pi UP2 and Pi [HP2 is controllable. 

VI. Relationship Between Event-Based Control 
and State-Based Control 

Up to now, two control techniques, the event-based su- 
pervisory control and the state feedback control, have been 
proposed in fuzzy DESs. The basic problem of interest is the 
relationship between the controllability of a fuzzy language 
and that of the corresponding reachable states. 

Let G = (Q, E, 6, qo) be a max-min automaton. Suppose 
that P C Q is a controllable fuzzy state set. Then by 
Theorem [2] we see that there is an FSFC / for G such 



that R{G*) = P. The following result shows that the fuzzy 
language Cfy generated by the closed-loop system of G and 
/ is controllable, as expected. Moreover, the corresponding 
fuzzy supervisor can be directly derived from the FSFC /. 

Theorem 3: Let P C Q be a controllable fuzzy state set 
and / be an arbitrary FSFC for G such that R{&) = P. 
Then 

1) C,Qf is a controllable fuzzy language; 

2) the fuzzy supervisor S : supp (Cq) — ► F{E) defined 



below results in C 
and 5 € E, 



S/G 



Cq } : for any s € supp(£ ( =,) 



1, 



if S^(qo,s) is defined 
otherwise. 



Proof: See Appendix I. ■ 
In turn, let JC C be a fuzzy language. Our aim is now 
to give a sufficient condition for a set of fuzzy states that 
arises naturally from JC to be controllable. More explicitly, we 
are concerned with when the following set of fuzzy states is 
controllable. 

R(fC) :={qeQ ■■ 3s £ E* such that fC(s) -q oS = q}. 

We think R(fC) natural since R(fC) exactly consists of all the 
states passed by JC in G when K, reduces to a crisp language. 

To present the sufficient condition, it is convenient to have 
the following definition. 

Definition 5: A fuzzy language K. C is said to be 
consistent if for any s\, §2 G E* and a G E with K.(sia) ^ 
and fC(§2a) ^ 0, the equality /C(si) • qo «i = ^(^2) ■ Qo -?2 
implies /C(si5) = /C(s2&). 

Intuitively, the consistency requires that if two strings Si and 
S2 bring the system to the same state and moreover successive 
strings sxa and §20, are possible, then the possibility degrees 
of §ia and §2a are uniform. This uniform possibility degree 
will simplify the definition of corresponding FSFC. 

Before stating the next result, let us introduce a notation. 
For K C Cq and any q G Q, define Sjc{q) '■= {s G E* : 
fC(s) ■ q o § = q}. 

Theorem 4: Let JC C £^ be a controllable fuzzy language. 
If JC is consistent, then we have the following: 

1) R{JC) is a controllable fuzzy state set. 

2) The function / : Q -> .P(P) defined by 

/(<?)(«) = (VseSx;(g)^(sa)) VP uc (a) 

is an FSFC that results in P(G / ) = P(/C). 
Proof: See Appendix I. ■ 
Remark 2: We remark that the condition in Theorem |4] is 
not a necessary condition. More precisely, if JC C £p is a 
controllable fuzzy language such that R(JC) is a controllable 
fuzzy state set, then JC is not necessarily consistent. For 
instance, let G" = (Q, E" , 5, q Q = [0.9, 0.1, 0]), where Q and 
8 are the same as those in Example Q] and E" = {0,1,02,03} 
with 



a 1 



0.4 
0.4 0.4 
0.4 0.9 0.4 



a 2 



0.4 
0.9 
0.4 





0.4 
0.4 






0.4 
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«3 



0.4 
0.4 
0.9 





0.4 
0.4 






0.4 



Set E uc (ai) = E uc (a 2 ) = E uc (a 3 ) = and take 

1 0.2 0.3 0.3 0.2 0.3 
- + — + — + — + ^r- + — 

ai 



K 



e ai a 2 a3 a,2ai a 3 ai 
Clearly, K. is a controllable fuzzy language. It is easy to show 
that R(K) = {q a , [0.3,0.1,0], [0.2,0.1,0]} is a controllable 
fuzzy state set. A simple computation, however, shows that 
fC(a,2) ■ qo oo 2 = /C(a 3 ) • qo 00,3, but £(0,20,1) ^ £(0,30,1). We 
thus see that K, is not consistent. 

VII. Stabilization of Fuzzy Discrete Event 
Systems 

In this section, we examine the stabilization of fuzzy DESs, 
that is, the possibility of driving a fuzzy DES (under control) 
from an initial state to a prescribed subset of fuzzy state set 
and then keeping it there indefinitely. This kind of stabilization 
is a classical topic in dynamic systems (see, for example, [1]) 
and was studied in the context of crisp DESs [2]. 

Let us begin with some basic concepts. A path in 
a fuzzy automaton (Q,E,5,qo) is a finite sequence 



(qi,ai,q 2 ,a 2 , ■ 



-1, 9m) of fuzzy states and fuzzy events 



that satisfies 6(<fo,ffli) = q_i+i for i = 1,2, ...,m — 1. The 
path (q~i,ai, q 2 ,a 2 , ■ ■ ■ ,a m -i,q m ) is a cycle if the tfe's, i = 
1, 2, . . . , m — 1, are all distinct and also q m = q~i. 

A fuzzy state q is reachable from a subset A of fuzzy states 
if q is reachable from at least one fuzzy state in N. We say 
that a fuzzy state q 6 Q\N is connected to A if there is a 
path from q to a fuzzy state in A. A set P of fuzzy states is 
said to be N -connected if each q £ P\A is connected to N. 
Further, G is called A-connected if R(G) is A-connected. 

We say that a fuzzy DES is stable if after finitely many 
transitions the system goes to one of the pre-specified legal 
states and stays among these states. To formalize this, let us 
reformulate the classical notion of attractor. 

Let G = (Q,E,5,q ) be a fuzzy DES and let ACQ. 
We say that A is an attractor of G, denoted G ~-> A, if the 
following conditions are satisfied: 

1) for any q £ A and any a £ E, 5(q,a) £ A whenever 
S(q, a) is defined. 

2) G is A-connected. 

3) G\N is acyclic. 

Observe that the fuzzy DES G" in Remark [2] has 
{[0.4,0.1,0]} as an attractor. 

Suppose that A is the pre-specified legal state set of G. 
Then G is called stable if there exists a subset A' C A such 
that G~+A'. 

It is natural to ask when a fuzzy DES is stable. To this 
end, let Af be the class of all attractors of G, that is, Af := 
{ACQ: G-^N}. Observe that R(G) £ Af, so the class is 
not empty. It is readily proved that attractors are closed under 
arbitrary intersections. This implies that the class Af has an 
infimal element with respect to set inclusion, denoted inf(AT)- 
Thus a fuzzy DES G is stable if and only if the pre-specified 
legal state set contains iof(Af), which is equivalent to saying 
that all fuzzy states in inf(Af) are legal. 



The following result provides an explicit characterization of 
inlYA';. 

Proposition 2: Let G — (Q,E, S,qo) and q 6 Q. Then 
q £ inf(A/") if and only if q satisfies one of the following two 
conditions: 

1) q is reachable from a fuzzy state of a cycle in G. 

2) For any a £ E, S(q, a) is not defined. 

Proof: This proposition is a special case of Proposition 
3.5 in [2], so we omit the proof. ■ 

Having described the stability of open-loop system, we now 
turn our attention to considering the stability of controlled 
fuzzy DESs. This stability under control is called stabilizabil- 
ity. Let A be the pre-specified legal state set of G. We say 
that G is stabilizable if there exist an FSFC / and a subset 
A' C A such that & ~-> A'. In other words, a stabilizable 
fuzzy DES is one for which there exists an FSFC so that the 
controlled system is stable. 

To characterize the stabilizability, it is convenient to have 
one more notion. Let G — (Q, E, S, qo) be a fuzzy DES with 
uncontrollable degree function E uc and let ACQ. We say 
that A is a controllable invariant set if for any q £ A and 
a G E with E uc (a) > and q o 5 7^ 0, there exists some a > 
E uc (a) such that a ■ q o a £ A. This means that if the current 
state lies in A, then we may control the system such that all 
successive states remain in A. We remark that the concept of 
controllable invariant set is a natural generalization of control- 
invariant predicate introduced for crisp DESs in [24]. 

The following result gives a necessary and sufficient condi- 
tion for a fuzzy DES to be stabilizable. 

Theorem 5: A fuzzy DES G = (Q, E, 8, qo) is stabilizable 
if and only if there are a controllable invariant set A' C A and 
a controllable fuzzy state set P C Q satisfying the following 
conditions: 

1) P is A'-connected. 

2) P\N' is acyclic. 

Proof: See Appendix I. ■ 

VIII. Conclusion 

In this paper, we have investigated the state-based control 
problem for fuzzy DESs modeled by max-min automata. We 
have concentrated on only some basic issues consisting of 
reachability, controllability, and stabilization, which often arise 
in applications. The fact that the reachable state set of a 
closed-loop system is generally not a subset of that of the 
corresponding open-loop system increases the complexity of 
discussion. The results obtained here are clearly applicable to 
the crisp DESs in the framework of Ramadge-Wonham. 

We make a brief discussion on the practical aspects of state- 
based control of fuzzy DESs. Like the selection of fuzzy logic 
controllers in Fuzzy Control, it is very hard to give a general 
guideline on when fuzzy DESs modeled by max-min automata 
are appropriate, so the designer is often left to use intuition 
and experience to make a choice. In Example Q] we have 
assumed that all data on fuzzy states and fuzzy events are 
provided by experts. In fact, this assumption has been widely 
used and accepted in the field of Fuzzy Control (see, for 
example, [21]). Many other methods have also been proposed 
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to define membership functions in the past decades (see, for 
example, [6], pp. 255-261), although there is no rule like 
maximum likelihood for probabilities to estimate possibilities. 
In practice, the estimated possibilities are usually adjusted by 
experiment and learning. 

There are also some theoretical problems on the state- 
based control of fuzzy DESs which are worth further studying. 
Firstly, a necessary and sufficient condition for R(fC) in The- 
orem |4] to be controllable is desirable. Secondly, the optimal 
control of fuzzy DESs which brings cost and effectiveness 
to a specification remains an interesting problem when using 
fuzzy control mechanisms. (This optimal control was studied 
under crisp control mechanisms in [16].) Finally, the state- 
based control for fuzzy DESs with partial observation is yet 
to be addressed. 
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Appendix I 
Proofs 

Proof of Lemma Q} We first prove the equality in 1) by 
induction on k. For k = 1, it follows immediately from the 
definition of 6* . We now assume that the equality holds for 
k - 1, that is, g fc _i = P(q , d\d 2 ■ ■ ■ a k -i) = (A^o,-) ■ 
5(qo,aia,2 ■■■d k -\). For the case of k, by the induction 
hypothesis we have that 

8 s (q ,aia 2 ■ ■ ■ a k ) = ^(<^(go, 5i5 2 • • • 5fc_i), 5 fc ) 
= S f (q k -x,a k ) 
= f(q~k-i)(a k ) ■ l(q k -i,a k ) 
= a k ■ 5(q k -i,a k ) 
= ak-(qk-i°a k ) 
= (a k ■ q k -i) o a k 

= [(A* =1 a 3 -) • S(q Q , aia 2 ■ ■ ■ 5 A _ X )] ° a k 
= {Aj = ictj) ■ [S(qo, aia 2 ■ ■ ■ 5 fc _i) o a k ] 
= (Aj =1 aj) ■ S(q ,aia 2 ■ ■ -a k ). 

So the case of k holds too, which completes the proof of 1). 

Let us now prove the equality in 2). By definition and the 
equality in 1), we get that 

£>Gf(aia 2 ■••5fc) 
= V" =1 (F(go,5i52 ■ ■ ■ 5k) o a 
= K=i[(tf=ia 3 ) ■ S(q~o,ai& 2 ■ ■ ■ a k )} oe, 
= [A j=i aj) A [V 7 l =1 S(qo,dia 2 ■ ■ -Ofc-i) o ej 
= {Aj =1 otj) A£ ( g(a 1 a 2 ---afe). 

Hence the equality in 2) holds, finishing the proof of the 
lemma. ■ 

Proof of Proposition [7} Assume that q G M(G). Then by 
definition there exists an FSFC / such that q G This 
means that there is some s = a\a 2 ■ ■ ■ a k G E* such that 



5'{%,s) = q. For convenience, let 5? (q ,aia 2 ■ ■ ■ a,j) = q~j 
and f(q~j-i)(aj) — a>j for j = 1, 2, . . . , k, and set d(qo, s) = 
p. Then ctj > E uc (dj), and thus Aj =1 aj > x{P)- By Lemma 
Q] we find that 

q = q k = S f (q ,s) = (A^Uj) ■ S(q ,s) = (A^O,-) -p. 

This, together with the fact p e R{G), yields that (A* =1 aj) • 
p G namely, q 6 &(p). So St{&) C (J &{q). 

Conversely, suppose that p G (J &(q)- Then there is a 

qER(G) 

q G R(G) such that p G &(q), which means that p = a ■ q 
for some a G [x(q)i !]■ By the definition of x(s)i there exists 
a fuzzy event a occurring in some string s G S^q) such that 
E uc {a) = x(?). Write s = wau, where w,u G -E*. We now 
define a function / : Q — > ^(-E) as follows: for any x € Q 
and e G E, 



a, if x = S(qo,w) and e 
1, otherwise. 



Observe that / is well-defined. Moreover, / gives an FSFC 
for G and yields that p = S^(qo,s). Hence p G M(G) by 
definition, which completes the proof. ■ 

Proof of Theorem |2} We first prove the sufficiency by 
constructing a desired FSFC. Suppose that P is controllable. 
Then by Definition |4] for every q G P we can choose a 
compatible subset C{q) of Succ(q) such that each state in 
P is reachable from q via some states in P. Let us define a 
function / : Q — > J-{E) according to the following cases: Let 
q & Q and a E E. 

Case 1. q ^ P. In this case, we define f(q)(a) = 1. 

Case 2. g G -P. Several subcases need to be considered. 

• If g o a = 0, then define f(q)(d) = 1. 

• If q o a ^ 0, then the definition of /(g)(5) depends on 
whether there exists a (5,p) G C(q) for some p € P. If such 
a (a,p) exists, then by the definition of successor there is an 
a > E uc {a) such that a-qod — p. We thus define f(q)(a) = a 
in this case. Note that by (CI) of Definition [3] the compatible 
set C(q) has no elements having the form (d,p') with p' ^ 
so f(q)(d) is well-defined. If (5,p) G - C(q) for any peP, 
then (C2) of Definition [3] implies that E uc (a) — 0, and we 
thus define f(q)(a) — 0. Summarily, f(q)(d) is defined as 
follows: 

1, if q G - P or q o d = 0; 
0, if g G P, goa ^ 0, and (a,p) C{q) 
f(q){a)={ foranypGP; 

a, otherwise, where a G [0, 1] satisfies that 
(5, a ■ q o 5) G C(g). 

By the previous arguments, f(q)(a) > E uc (a) for any q £ Q 
and a G E, and hence / is an FSFC. 

We are now ready to show that R{&) = P. Assume that 
q G R{&). If q = q~o> it follows immediately from Definition 
H that q G P; otherwise, by definition there are an integer 
k > and 5i, 5a, . . . , a k EE such that <F (go, 5i5a • • • 5^) = 
<?. Set gj = S^(qo, a\d 2 ■ ■ ■ 5j) for i = 1, 2, . . . , fc. Then g*j G 
fl(G^) and /(gi_i)(oi) > for all i = 1,2,..., it. Since 
go G P and g ° «i 7^ 0, there is an a.\ — /(go)(5i) G [0, 1] 
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such that (Si, ax ■ q~o 0S1) G C(qo) by the above definition of 
/. Consequently, ax • qo o Si 6 P. Since qx = <F (go,Si) = 
f(qo)(ctx) -qo °5i = ocx '<7o°Si, it yields that qx 6 P. Iterating 
this process, we see that q — q k £ P. Thus R(G$) C P. 

In turn, suppose that p G P. If p = qo, it is trivial that 
p G R(Gf). If p ^ qo, then by Definition [4] there exist an 
integer k > and a sequence (go, Si, g~i, S 2 , . . . , S&, (ft = p) 
with (a,i,q~i) G C(gi_i) for i — 1,2, ...,fc. Since g £ P, 
<7o°Si 7^ 0, and (Si, g"i) G C(go), we know by the definition of 
/ that /(g~o)(Si) = ax for some ai G [0, 1] satisfying (ax, ax ■ 
qo o ax) G C(qo). It therefore follows from (CI) of Definition 
13 that qx = ax ■ qo o ax. Note that ax ■ qo ° ax = ^ (%,o,\), 
so q~x — <^(?o>Si) G R(&). Iterating this process, we get 
that p = q k = 6 f (q k -x,a k ) = 8 f (q , S X S 2 • ■ ■ a k ) G R(G f ). 
Accordingly, P C R(&), which completes the proof of the 
sufficiency. 

Let us now turn to the proof of the necessity. Assume that 
there exists an FSFC / for G such that R(G*) = P. For any 
q G P, we take 



C(q) = {(d,p) : a G E, p G P, and S f (q,d) =p}. 



We now want to show that C(q) is a compatible subset 
of Succ(g). Note that by definition /(g) (S) > E uc (a) and 
Sf(q,a) — f(q)(d) ■ q o a, so C(q) C Succ(g). It follows 
from the above definition of C(q) that (CI) of Definition [3] 
holds evidently. If a G E with E uc (a) > and g o a ^ 0, 
then f(q)(d) > E uc (d) > and thus 8*(q,d) is defined. The 
hypothesis R(&) = P forces that <5^(g, a) G P, and therefore 
(a,6*(q~,a)) G C(g). Hence C(q) is a compatible subset of 
Succ(g). 

For any p G P, it follows from R(&) = P that there are 
some fc > and Si, S2, • • • , S& such that S^(qo, 0,10,2 ■ • ■ dk) = 
p. Let gi = 5f(qo, SiS 2 • ■ ■ Sj) for i = 1, 2, • • • , fc. Then by 
the above definition of C(g) we have that (Sj,gj) G C(gj_i) 
for { = 1, 2, • • • , fc. As a result, there is a desired sequence 
(qo,ox,qi,a 2 , ■ ■ ■ ,a k ,qk — p) that makes P controllable by 
Definition [4] thus finishing the proof of the theorem. ■ 

Proof of Theorem\3\ Let us first prove 1). We have seen that 
£(§/ Q C>g in Section III. To verify that £g f is controllable, 
by Definition [TJ we need to check that Cq S £ uc (1 £q C /C, 
namely (Lq S E uc C\jCq)(s) < £g/(s) for any s G P*. Denote 
by |s| the length of a string s. If \s\ = 0, namely s = e, then 
it is obvious that (Cq S £ uc (~l -Cg)(s) = < 1 = £g/(s). 
In the case \s\ > 0, assume that s — dxd 2 • ■ ■ df. for some 
Si, S2, . . . , dk G E. Let qj — (qo, S1S2 • • ■ dj) and aj = 
/(gj_i)(Sj) for j = 1,2, ... ,k. Then it follows from 2) of 
Lemma[TJthat £ ( =, / (aia 2 •••5j) = (Aj =1 aj) A£g(SiS2 • • -S;) 



for any 1 < 2 < fc. We thus have that 

(£g^ uc n£g)(s) 

= (Cqj£ uc n £q)(SiS 2 • • • Sfe) 

= ^g/ ("i"2 • • • Sfe_i) A E uc (d k ) A CQ(axd 2 • • ■ d k ) 
= {^ k jZ\a ) A £g(aia2 • • • a fe _i) A E uc (d k ) 

A££,(aia2 ■■■dk) 
= (Ajllaj) A E uc (d k ) A C^(axd 2 ■ • ■ d k ) 
< (A* =x Q!j) A £g,(aia 2 • • • a fc ) (since a k > E uc (d k )) 
= Cqj (dxd 2 ■ ■ ■ dk) 
= ^ G /(*)> 

i.e., (Cqj £ uc n Cq)(s) < Lqj(s), which finishes the proof of 
1). 

We now prove the assertion 2). It is clear that S defined 
in Theorem [3] gives rise to a fuzzy supervisor, and thus 
£§/q is a fuzzy language. This means that JC§/q(c) = 1 
and Cg^(sd) < Cg^Q(s) for any s G E* and a G E. In 
order to verify Cg/Q — £>q{, we need only to show that 
C§iq(s) — Cqs(s) for any s G E*. Use induction on the 
length of s. 

In the basis step, namely, s = e, it is obvious that 
Cg,Q(e) = 1 = Cqi((). Suppose as induction hypothesis 
that C§iq(s) = £(j f (s) for all strings s having the form 
s = dxd 2 ■ ■ ■ Sfc. We now prove the same for strings of 
the form sSfe+i. Note that if S^(qo,s) is not defined, then 
= by definition. We thus get by the induction 
hypothesis that £c;,q(s) = 0. It follows from Cg^Q(sd k +x) < 
c s/g( s ) and ^-Gfi^k+x) < £ G f(s) that £g /(5 (sSfc + i) = 
= C(jf(sd k+ x)- We now consider the case that 8^(qo,s) is 
defined. Let qj = 8' (qo, dxd 2 ■ ■ ■ dj) and aj — /(gj_i)(Sj) 
for j — 1, 2, . . . , k + 1. Then by Lemma [TJ we see that 
CQj(sd k+ i) = (A^tlaj) A C,j(sd k+ i). On the other hand, 
by definition and the induction hypothesis we have that 

Cg /<5 (Sd k+1 ) = C d (Sd k+1 ) A S(s)(d k+1 ) A Cg /e (s) 

= Cgisdk+x) A f(q k )(d k+1 ) A £g, f (s) 

= £«§(sa fe+ i) A a k+ i A [(A* =1 aj) A C^{s)' 

= £c(™k+i) A(A)t\a 3 ) AC d (S) 

= {^tl a j) AC d (Sd k+1 ). 

Consequently, Cg^Q(sd k +x) = CQf(sdh+x), finishing the 
proof of 2). ■ 

To prove Theorem|4] we need a useful property of consistent 
fuzzy languages. 

Lemma 2: Let K- C Lq be a consistent fuzzy language. If 

§i,s 2 G S;c(q) and S G E with K,(sxd) / and K(s 2 d) ^ 0, 
then /C(siS) • go SiS = /C(s 2 a) ■ go S2S. 

Proof: Since s l5 s 2 G Sic(q), we see that AC(si)-g °si = 
K-(s 2 )-qo°s 2 - Since AC is consistent, K.(s\d) = /C(s 2 a). Noting 
that AC(sjS) < AC(sj) for i = 1,2, we have the following 
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calculation: 

K-(sid) • qo o §id — /C(si5) • qo o si o a 

= (/C(sia) A IC(§i)) ■ qo o §i o a 

= /C(s!a) • (IC(Si) ■ q o §i o a) 

= K,(s 2 d) ■ (IC(s 2 ) ■ % o s 2 o a) 

= (/C(s 2 a) A IC(s 2 )) ■ qo ° s 2 ° a 

= /C(s 2 a) ■ qo ° s 2 d. 

So the lemma holds. ■ 

Proof of 1) of Theorem^} By the definition of controllability, 
we need provide a selection of appropriate compatible sets. For 
any q = K,(s) ■ qo o s G R(JC), let us define 

C(q) = {(a,p) :aeE,p/0, 3s' G ^(g) such that 

IC(s'a) ■ qo o s'a = p}. 

Observe that by Lemma [2] for any a G E there is at most one 
p G R(IC) satisfying (a,p) G C(q). 

Recall that by definition Succ(q) = {(d,p) : a G E,p G 
R(K-), and 3a > E uc (d) such that a • q o a = p}. We now 
claim that C(q) defined above is a subset of Succ(q). In fact, 
for any (d,p) G C(q), p has the form /C(s'a) • qo ° s'a, and 
thus it is obvious that p G R(JC) by the definition of R(K-). So 
we only need show that there exists some a > E uc (d) such 
that a-qoa = p. Since K, is a controllable fuzzy language, by 
definition we have that JC(s') A E uc (d) A C^s'd) < K(s'd). 
Note that /C(S'a) < /C(s') and K.{s'd) < Cq{s'o). Hence 
there exists a /3 > -E uc (a) such that IC(s') A (3 A /^^(s'a) = 
K,(s'a). Suppose that q o s'a = [xi,x 2 , . . . ,x n }. Then it is 
clear that £^(§'0) = Vf =1 Xi. We thus get from IC(s'a) < 
Cc(s'a) that /C(s') A (3 A (V" =1 x 4 ) = K.{s'd) A (V^^). 
By a straightforward calculation, we find that (/C(s') A (3) ■ 
[x\, x 2l . . . , x n ] = K,(s'a) ■ [xi,x 2 , . . . , x n ]. That is, (IC(s') A 
0) ■ qo S'd = IC(s'a) ■ qo ° s'a = p- Taking a = (3, we see 
that a > E uc (a) and 

a-qoa = (3 ■ qo a 

= (3 ■ {IC(s') ■ qo o §') o a (since s' G Stc(q)) 

= (3 ■ (IC(s') ■ q o s'a) 

= (IC(s') A f3) ■ qo ° s'a 

= P, 

which proves the claim. 

Observe that the condition (CI) of Definition [3] follows 
immediately from the previous argument. For the condition 
(C2) of Definition |3] assume that a G E with E uc (a) > and 
qoa ^ 0. Then we see that /C(s) -qoosoa = qod^0, which 
implies that /C(s) 7^ and q o sa ^ 0. Hence £(sa) ^ 0. 
This, together with E uc (a) > and the controllability of JC, 
forces K,{sa) 7^ 0, which yields that K,(sa)-qoosa 7^ 0. Taking 
p = K-(sd) ■ qo o sa, we have by definition that (a,p) G C(q). 
Consequently, C(q) defined above is compatible. 

We proceed to show that every fuzzy state in R(K-) is 
reachable. Let q = IC(s) ■ q ° s G R(JC). Suppose that 
s = did 2 ■ ■ ■ &k, and set Sj = aia 2 • • ■ a^ and q^ = /C(sj)-qo°Si 
for i = 1,2, ...,k. Then qk = q and there is a sequence 



{qo,ai,qi,a 2 , . . . ,a k ,q k ) with (a^q,) G C{q^i) for all 
i = 1,2, ... ,k. Thus i?(/C) is controllable by Definition |4] 
and the proof of 1) is finished. ■ 

To prove the part 2) of Theorem @] it is convenient to have 
the following observation. 

Lemma 3: Keep the conditions and the definition of / in 
Theorem |4] Then S^(qo,S) — K,(s) ■ qo o § for any s G E* 
with IC(s) ^0. 

Proof: Let us prove it by induction on the length of s. 

In the case |s| = 0, i.e., s — e, the lemma is trivial. If 
|s| = 1, say s — a for some a G E, we have that 

$ f (qo,s) = f(q )(a) ■ q oa 

= (IC(a) V E uc (a)) ■ q o a (since /C(a) 7^ 0) 

= (IC(a) V E uc (d)) ■ (Cq(cl) ■ q o a) 

= [(/C(a) V£ M (a)) A£g(a)] • q o a 

= [(£(0) A £,5( a )) V (^„c(a) A C e (d))} 
■q o a 

= [/C(a) V (E uc (a) A C^{a))] ■ q o a 

= /C(a) • qo a. 

The last equality above follows from the controllability of 
K,, which yields that IC(e) A E uc (a) A C(a) = IC(a), namely 
E uc (a)A£(a) = K,(a). So the lemma holds in the case s = 1. 

The induction assumption is that 8* (qo, s) = K,(s) ■ qo s 
for all strings s satisfying |s| < k and JC(s) 7^ 0. We now 
prove the same for strings having the form sa and satisfying 
K,(sa) 7^ 0. By the induction assumption, we obtain that 

P(qo,sa) = f(S f (q ,s))(a,)-S f (qo,s)od 

= f{JC(s)-qooS)(a)-(IC(s)-qooSd) 
= (/C(sa) V E uc (a)) ■ [(/C(s) A Cq(so)) ■ qo o sa] 
(by the definition of / and the consistency of 
K) 

— [(/C(sa) V E uc (a)) A /C(s) A Cq(so)] ■ qo o sa 

— [/C(sa) V (/C(s) A E uc (a) A Cq(so))] ■ qo o sa 
= K,(sa) ■ qo o sa. 

Again, the last equality follows from the controllability of K,, 
which yields that /C(s) A E uc (d) A Cq(so) = K,(sa). This 
finishes the proof. ■ 

Proof of 2) of Theorem @- Obviously, / defined in 2) 
of Theorem |4] gives rise to an FSFC. It remains to show 
that R(G f ) = R{1C). Recall that by definition R(G f ) = 
{5 f {qo,§) : § G E,P(q ,S) ^ 0} and R{K) = {£(§)■ q o~s : 
s G E, K{s) ■ qo o s ^ 0}. 

It follows directly from Lemma [3] that R{K) C R{&). 
Conversely, let q = P(q ,S) G i?(G / ). If tC(s) ^ 0, then 
we see from Lemma [3] that q = fC(s) ■ qo s G R(JC). 
Let us consider the case where /C(s) = 0. Assume that 
s = did 2 ■ ■ ■ dk and write Sj — d\d 2 ■ ■ ■ dj for j = 0, 1, . . . , k, 
where sq = e. Then there is a prefix Sj of s such that IC(5j) 7^ 
but JC(Sjdj+i) = 0. Let q, = (qo, §i) for i = 0, 1, . . . , k. 
Thus we get by Lemma|3]that qj — 6* (qo ,Sj) = )C(Sj ) • qo o Sj ;. 
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Note that by definition 

= (Vsj&SKCfjjK^Oj+i) v E uc (d j+1 )) 

•0^(sj) ■% os jUj+i). (i) 

Since g^+i is defined, qo o SjCLj+i ^ 0, which implies that 
>Cg(sj2j+i) 7^ 0. The controllability of AC, together with 
K-(Sj) 7^ and AC(sy<Zj+i) = 0, forces that E uc (a,j+i) = 0. 
As a consequence, we see that 

(!) = (Vsjes^jA^Oj+i)) • (£(%) • g ° %Oj+i)> 

which means that Vg'. e s JC (^)/C(Sj-2j+i) 7^ 0. Suppose that 
/C(^.5j + i) = V s / eSK (? 3 )^(Sjaj+i)- Then /C(s^5 j+ i) 7^ 0. 
Since s'j G S/c(q~j), we have that AC(s') • s'j = q"j = 
JC(sj) ■ q o 5j. So JC(s'j) ■ q ° tfjUj+i = K.($j) ■ qo o Sjdj+i, 
and thus 



(1) = 



KiSjdj+i) • (/C(sj) • q o Sj5 i+ i) 
= • • <7o s'jUj+i) 

= (^(Sj-5j+i) A ' <7o SjOj+i 

= ^(s'jdj+i) ■ q o Sj-5j+i, 

namely, g, + i = /C(^5j+i)'go°Sj'5j+:i.. Using the proven fact 
JC(s'-5j+i) 7^ 0, we get by Lemma[3]that q~j + x = tC(s'jO,j + i) ■ 
qo s'jOij+i — S^(qo, s'jdj+x). If j + 1 = k, then we have that 
q = qk G R[K). Otherwise, two cases need to be considered. 
The first case is that /C(sj5j+i2j+2) 7^ 0. In this case, we 
take s^ +1 = ffj5j+i and get that 

= S f (q ,s' j+1 a j+2 ) 



by Lemma [3] For the second case that JC(Sj-5j+i5j+2) = 0, 



we can obtain a string 



such that K,(s'j +1 dj + 2) 7^ 



and oj+2 = K(s' j+1 aj +2 ) ■ qo s' j+1 dj +2 by using the same 
approach to obtaining s'j as before. Consequently, qj+2 G 
H(/C) in both cases. If j + 2 = fc, we get that q G P(AC); 
otherwise, let us continue the previous process of finding s^ +1 . 
Clearly, within finite steps we can find a string Sfc_i such that 
q = q k = K(s? k _ x a,k) ■ qo Sfc-iOfc G P(AC). Hence, we get 
that i?(G / ) C i?(/C), and thus R(G f ) = RQC), completing 
the proof of 2). ■ 

Proof of Theorem [5} We first prove the sufficiency by 
constructing a desired FSFC / that results in G* AT. 
Assume that there are a controllable invariant set N' C N and 
a controllable fuzzy state set P C Q satisfying 1) and 2) of 
Theorem Then there is an FSFC /' such that R(G f ') = P. 
Let us define a function / : Q — > J-(E) as follows: for any 
q & Q and a £ E, 



/(<?)(«) = 



0, if g G TV', <^'(g,a) G P\jV', 

and E uc (a) = 
a, if qe N', P'(q,a) eP\N\ 

and E uc (a) > 
/'(g) (a), otherwise 



where a is an arbitrary element of U(q,a) := {x G [0, 1] : 
x > E uc {a) such that x • q o a G AT'}. For any q £ N' and 
a E E with <5^ ' (g, 0) G P\ AT, it is clear that g o a 7^ 0. 
Further, if E uc (a) > 0, then U(q,a) 7^ by the controllable 
invariance of AT. Consequently, the a in the above definition 
does exist. We thus conclude that / is an FSFC. 

We next show that AT is an attractor of & . By the definition 
of /, we see that 8* (g, a) G AT' for any q G AT' and 
a G E whenever 6* (g, 5) is defined. It also follows from the 
definition of / that R(G f ) C PUA^'. Since P is A^'-connected 
by assumption, R(&) is A^'-connected as well. That is, & is 
A^'-connected. The assumption that P\N' is acyclic, together 
with P(G / ) C PUN', yields that R(G f )\N' is acyclic, 
namely, G*\N' is acyclic. Hence AT' is an attractor of G' , 
and thus G is stabilizable. 

We now show the necessity. Suppose that G is stabilizable. 
Then by definition there exist an FSFC / and a subset N' C N 
such that & ~~»A r '. If g G AT and 5 G E satisfy that E uc (a) > 
and q o a 7^ 0, then it is necessary that <F (g, a) is defined. 
Thus by the definition of & ~+N' we get that P (g, a) G AT. 
Taking a = f(q)(a), we see that a • q o a = 5-> (q, a) G AT. 
Therefore, AT' is a controllable invariant set. Set P = R{G^ ). 
Then P is controllable. Again by the definition of & AT, 
we have that P is A^-connected and P\N' is acyclic. This 
completes the proof. ■ 
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